Moxa AWK-3131A Web Application systemlog.log Information Disclosure (CVE-2016-8725)

An exploitable information disclosure vulnerability exists in the Web Application functionality of the Moxa AWK-3131A wireless access point running firmware 1.1. Retrieving a specific URL without authentication can reveal sensitive information to an attacker. This plugin only works with Tenable.o...

Moxa AWK-3131A Web Application systemlog.log Information Disclosure Vulnerability(CVE-2016-8725)

Summary An exploitable information disclosure vulnerability exists in the Web Application functionality of the Moxa AWK-3131A wireless access point running firmware 1.1. Retrieving a specific URL without authentication can reveal sensitive information to an attacker. Tested Versions Moxa AWK-3131...

CVE-2016-8725

CVE-2016-8725 affects Moxa AWK-3131A wireless access point (firmware 1.1). A vulnerability in the Web Application allows information disclosure by retrieving a protected URL (e.g., systemlog.log) without authentication. Public sources (Talos, Seebug, OpenVAS plugin, CVE entries) describe a PoC us...